openSUSE Security Update : the Linux Kernel (openSUSE-2021-393)

high Nessus Plugin ID 147563

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

The openSUSE Linux Leap 15.2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed :

- CVE-2021-26930: Fixed an improper error handling in blkback's grant mapping (XSA-365 bsc#1181843).

- CVE-2021-26931: Fixed an issue where Linux kernel was treating grant mapping errors as bugs (XSA-362 bsc#1181753).

- CVE-2021-26932: Fixed improper error handling issues in Linux grant mapping (XSA-361 bsc#1181747). by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#178372).

- CVE-2020-12362: Fixed an integer overflow in the firmware which may have allowed a privileged user to potentially enable an escalation of privilege via local access (bsc#1181720).

- CVE-2020-12363: Fixed an improper input validation which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181735).

- CVE-2020-12364: Fixed a NULL pointer reference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181736 ).

- CVE-2020-12373: Fixed an expired pointer dereference which may have allowed a privileged user to potentially enable a denial of service via local access (bsc#1181738).

- CVE-2020-29368,CVE-2020-29374: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179660, bsc#1179428).

The following non-security bugs were fixed :

- ACPICA: Fix exception code class checks (git-fixes).

- ACPI: configfs: add missing check after configfs_register_default_group() (git-fixes).

- ACPI: property: Fix fwnode string properties matching (git-fixes).

- ACPI: property: Satisfy kernel doc validator (part 1) (git-fixes).

- ACPI: property: Satisfy kernel doc validator (part 2) (git-fixes).

- ALSA: hda: Add another CometLake-H PCI ID (git-fixes).

- ALSA: hda/hdmi: Drop bogus check at closing a stream (git-fixes).

- ALSA: hda/realtek: modify EAPD in the ALC886 (git-fixes).

- ALSA: pcm: Assure sync with the pending stop operation at suspend (git-fixes).

- ALSA: pcm: Call sync_stop at disconnection (git-fixes).

- ALSA: pcm: Do not call sync_stop if it hasn't been stopped (git-fixes).

- ALSA: usb-audio: Add implicit fb quirk for BOSS GP-10 (git-fixes).

- ALSA: usb-audio: Correct document for snd_usb_endpoint_free_all() (git-fixes).

- ALSA: usb-audio: Do not avoid stopping the stream at disconnection (git-fixes).

- ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode (git-fixes).

- ALSA: usb-audio: Handle invalid running state at releasing EP (git-fixes).

- ALSA: usb-audio: More strict state change in EP (git-fixes).

- amba: Fix resource leak for drivers without .remove (git-fixes).

- arm64: Update config file. Set CONFIG_WATCHDOG_SYSFS to true (bsc#1182560)

- armv7hl: lpae: Update config files. Disable KVM support (bsc#1182697)

- ASoC: cpcap: fix microphone timeslot mask (git-fixes).

- ASoC: cs42l56: fix up error handling in probe (git-fixes).

- ASoC: simple-card-utils: Fix device module clock (git-fixes).

- ASoC: SOF: debug: Fix a potential issue on string buffer termination (git-fixes).

- ata: ahci_brcm: Add back regulators management (git-fixes).

- ata: sata_nv: Fix retrieving of active qcs (git-fixes).

- ath10k: Fix error handling in case of CE pipe init failure (git-fixes).

- ath9k: fix data bus crash when setting nf_override via debugfs (git-fixes).

- bcache: fix overflow in offset_to_stripe() (git-fixes).

- blk-mq: call commit_rqs while list empty but error happen (bsc#1182442).

- blk-mq: insert request not through ->queue_rq into sw/scheduler queue (bsc#1182443).

- blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue (bsc#1182444).

- block: fix inflight statistics of part0 (bsc#1182445).

- block: respect queue limit of max discard segment (bsc#1182441).

- block: virtio_blk: fix handling single range discard request (bsc#1182439).

- Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function (git-fixes).

- Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv (git-fixes).

- Bluetooth: drop HCI device reference before return (git-fixes).

- Bluetooth: Fix initializing response id after clearing struct (git-fixes).

- Bluetooth: hci_uart: Fix a race for write_work scheduling (git-fixes).

- Bluetooth: Put HCI device if inquiry procedure interrupts (git-fixes).

- bnxt_en: Fix accumulation of bp->net_stats_prev (git-fixes).

- bnxt_en: fix error return code in bnxt_init_board() (git-fixes).

- bnxt_en: fix error return code in bnxt_init_one() (git-fixes).

- bnxt_en: Improve stats context resource accounting with RDMA driver loaded (git-fixes).

- bnxt_en: read EEPROM A2h address using page 0 (git-fixes).

- bnxt_en: Release PCI regions when DMA mask setup fails during probe (git-fixes).

- bonding: Fix reference count leak in bond_sysfs_slave_add (git-fixes).

- bonding: set dev->needed_headroom in bond_setup_by_slave() (git-fixes).

- bonding: wait for sysfs kobject destruction before freeing struct slave (git-fixes).

- bpf, cgroup: Fix optlen WARN_ON_ONCE toctou (bsc#1155518).

- bpf, cgroup: Fix problematic bounds check (bsc#1155518).

- btrfs: add assertion for empty list of transactions at late stage of umount (bsc#1182626).

- btrfs: Cleanup try_flush_qgroup (bsc#1182047).

- btrfs: Do not flush from btrfs_delayed_inode_reserve_metadata (bsc#1182047).

- btrfs: Fix race between extent freeing/allocation when using bitmaps (bsc#1181574).

- btrfs: fix race between RO remount and the cleaner task (bsc#1182626).

- btrfs: fix transaction leak and crash after cleaning up orphans on RO mount (bsc#1182626).

- btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan (bsc#1182626).

- btrfs: Free correct amount of space in btrfs_delayed_inode_reserve_metadata (bsc#1182047).

- btrfs: lift read-write mount setup from mount and remount (bsc#1182626).

- btrfs: Remove btrfs_inode from btrfs_delayed_inode_reserve_metadata (bsc#1182047).

- btrfs: run delayed iputs when remounting RO to avoid leaking them (bsc#1182626).

- btrfs: Simplify code flow in btrfs_delayed_inode_reserve_metadata (bsc#1182047).

- btrfs: Unlock extents in btrfs_zero_range in case of errors (bsc#1182047).

- caif: no need to check return value of debugfs_create functions (git-fixes).

- ceph: fix flush_snap logic after putting caps (bsc#1182854).

- cgroup: Fix memory leak when parsing multiple source parameters (bsc#1182683).

- cgroup: fix psi monitor for root cgroup (bsc#1182686).

- cgroup-v1: add disabled controller check in cgroup1_parse_param() (bsc#1182684).

- chelsio/chtls: correct function return and return type (git-fixes).

- chelsio/chtls: correct netdevice for vlan interface (git-fixes).

- chelsio/chtls: fix a double free in chtls_setkey() (git-fixes).

- chelsio/chtls: fix always leaking ctrl_skb (git-fixes).

- chelsio/chtls: fix deadlock issue (git-fixes).

- chelsio/chtls: fix memory leaks caused by a race (git-fixes).

- chelsio/chtls: fix memory leaks in CPL handlers (git-fixes).

- chelsio/chtls: fix panic during unload reload chtls (git-fixes).

- chelsio/chtls: fix socket lock (git-fixes).

- chelsio/chtls: fix tls record info to user (git-fixes).

- Cherry-pick ibmvnic patches from SP3 (jsc#SLE-17268).

- chtls: Added a check to avoid NULL pointer dereference (git-fixes).

- chtls: Fix chtls resources release sequence (git-fixes).

- chtls: Fix hardware tid leak (git-fixes).

- chtls: Fix panic when route to peer not configured (git-fixes).

- chtls: Remove invalid set_tcb call (git-fixes).

- chtls: Replace skb_dequeue with skb_peek (git-fixes).

- cifs: check all path components in resolved dfs target (bsc#1181710).

- cifs: fix nodfs mount option (bsc#1181710).

- cifs: introduce helper for finding referral server (bsc#1181710).

- cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440).

- cirrus: cs89x0: remove set but not used variable 'lp' (git-fixes).

- cirrus: cs89x0: use devm_platform_ioremap_resource() to simplify code (git-fixes).

- clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL (git-fixes).

- clk: meson: clk-pll: make 'ret' a signed integer (git-fixes).

- clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate() (git-fixes).

- clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs (git-fixes).

- clk: sunxi-ng: h6: Fix CEC clock (git-fixes).

- clk: sunxi-ng: h6: Fix clock divider range on some clocks (git-fixes).

- clk: sunxi-ng: mp: fix parent rate change flag check (git-fixes).

- clocksource/drivers/ixp4xx: Select TIMER_OF when needed (git-fixes).

- cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in
->remove() (git-fixes).

- cpufreq: brcmstb-avs-cpufreq: Free resources in error path (git-fixes).

- cpuset: fix race between hotplug work and later CPU offline (bsc#1182676).

- crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key() (git-fixes).

- crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error) (git-fixes).

- cxgb3: fix error return code in t3_sge_alloc_qset() (git-fixes).

- cxgb4: fix all-mask IP address comparison (git-fixes).

- cxgb4: fix checks for max queues to allocate (git-fixes).

- cxgb4: fix endian conversions for L4 ports in filters (git-fixes).

- cxgb4: fix set but unused variable when DCB is disabled (git-fixes).

- cxgb4: fix SGE queue dump destination buffer context (git-fixes).

- cxgb4: fix the panic caused by non smac rewrite (git-fixes).

- cxgb4: move DCB version extern to header file (git-fixes).

- cxgb4: move handling L2T ARP failures to caller (git-fixes).

- cxgb4: move PTP lock and unlock to caller in Tx path (git-fixes).

- cxgb4: parse TC-U32 key values and masks natively (git-fixes).

- cxgb4: remove cast when saving IPv4 partial checksum (git-fixes).

- cxgb4: set up filter action after rewrites (git-fixes).

- cxgb4: use correct type for all-mask IP address comparison (git-fixes).

- cxgb4: use unaligned conversion for fetching timestamp (git-fixes).

- dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function (git-fixes).

- dmaengine: fsldma: Fix a resource leak in the remove function (git-fixes).

- dmaengine: hsu: disable spurious interrupt (git-fixes).

- dmaengine: owl-dma: Fix a resource leak in the remove function (git-fixes).

- dm crypt: avoid truncating the logical block size (git-fixes).

- dm: fix bio splitting and its bio completion order for regular IO (git-fixes).

- dm thin: fix use-after-free in metadata_pre_commit_callback (bsc#1177529).

- dm thin metadata: Avoid returning cmd->bm wild pointer on error (bsc#1177529).

- dm thin metadata: fix lockdep complaint (bsc#1177529).

- dm thin metadata: Fix use-after-free in dm_bm_set_read_only (bsc#1177529).

- dm: use noio when sending kobject event (bsc#1177529).

- docs: filesystems: vfs: correct flag name (bsc#1182856).

- dpaa2-eth: fix return codes used in ndo_setup_tc (git-fixes).

- Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() (git-fixes).

- drivers: net: davinci_mdio: fix potential NULL dereference in davinci_mdio_probe() (git-fixes).

- drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[] (git-fixes).

- drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs (git-fixes).

- drm/amd/display: Change function decide_dp_link_settings to avoid infinite looping (git-fixes).

- drm/amd/display: Decrement refcount of dc_sink before reassignment (git-fixes).

- drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction (git-fixes).

- drm/amd/display: Fix dc_sink kref count in emulated_link_detect (git-fixes).

- drm/amd/display: Fix HDMI deep color output for DCE 6-11 (git-fixes).

- drm/amd/display: Free atomic state after drm_atomic_commit (git-fixes).

- drm/amd/display: Revert 'Fix EDID parsing after resume from suspend' (git-fixes).

- drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition (git-fixes).

- drm/fb-helper: Add missed unlocks in setcmap_legacy() (git-fixes).

- drm/gma500: Fix error return code in psb_driver_load() (git-fixes).

- drm/meson: Unbind all connectors on module removal (bsc#1152472)

- drm/sun4i: dw-hdmi: always set clock rate (bsc#1152472)

- drm/sun4i: dw-hdmi: Fix max. frequency for H6 (bsc#1152472)

- drm/sun4i: Fix H6 HDMI PHY configuration (bsc#1152472)

- drm/sun4i: tcon: set sync polarity for tcon1 channel (bsc#1152472)

- drm/vc4: hvs: Fix buffer overflow with the dlist handling (bsc#1152489)

- exec: Always set cap_ambient in cap_bprm_set_creds (git-fixes).

- exfat: Avoid allocating upcase table using kcalloc() (git-fixes).

- ext4: do not remount read-only with errors=continue on reboot (bsc#1182464).

- ext4: fix a memory leak of ext4_free_data (bsc#1182447).

- ext4: fix bug for rename with RENAME_WHITEOUT (bsc#1182449).

- ext4: fix deadlock with fs freezing and EA inodes (bsc#1182463).

- ext4: fix superblock checksum failure when setting password salt (bsc#1182465).

- ext4: prevent creating duplicate encrypted filenames (bsc#1182446).

- fgraph: Initialize tracing_graph_pause at task creation (git-fixes).

- firmware_loader: align .builtin_fw to 8 (git-fixes).

- fscrypt: add fscrypt_is_nokey_name() (bsc#1182446).

- fscrypt: rename DCACHE_ENCRYPTED_NAME to DCACHE_NOKEY_NAME (bsc#1182446).

- fs: fix lazytime expiration handling in
__writeback_single_inode() (bsc#1182466).

- gma500: clean up error handling in init (git-fixes).

- gpio: pcf857x: Fix missing first interrupt (git-fixes).

- HID: core: detect and skip invalid inputs to snto32() (git-fixes).

- HID: make arrays usage and value to be the same (git-fixes).

- HID: wacom: Ignore attempts to overwrite the touch_max value from HID (git-fixes).

- hwrng: timeriomem - Fix cooldown period calculation (git-fixes).

- i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition (git-fixes).

- i2c: iproc: handle only slave interrupts which are enabled (git-fixes).

- i2c: mediatek: Move suspend and resume handling to NOIRQ phase (git-fixes).

- i2c: stm32f7: fix configuration of the digital filter (git-fixes).

- i3c: master: dw: Drop redundant disec call (git-fixes).

- i40e: acquire VSI pointer only after VF is initialized (jsc#SLE-8025).

- i40e: avoid premature Rx buffer reuse (git-fixes).

- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs (git-fixes).

- i40e: Fix MAC address setting for a VF via Host/VM (git-fixes).

- i40e: Fix removing driver while bare-metal VFs pass traffic (git-fixes).

- i40e: Revert 'i40e: do not report link up for a VF who hasn't enabled queues' (jsc#SLE-8025).

- iavf: fix double-release of rtnl_lock (git-fixes).

- iavf: fix error return code in iavf_init_get_resources() (git-fixes).

- iavf: fix speed reporting over virtchnl (git-fixes).

- iavf: Fix updating statistics (git-fixes).

- ibmvnic: add memory barrier to protect long term buffer (bsc#1182485 ltc#191591).

- ibmvnic: change IBMVNIC_MAX_IND_DESCS to 16 (bsc#1182485 ltc#191591).

- ibmvnic: Clean up TX code and TX buffer data structure (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Clear failover_pending if unable to schedule (bsc#1181960 ltc#190997).

- ibmvnic: compare adapter->init_done_rc with more readable ibmvnic_rc_codes (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Correctly re-enable interrupts in NAPI polling routine (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: create send_control_ip_offload (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: create send_query_ip_offload (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: device remove has higher precedence over reset (bsc#1065729).

- ibmvnic: Do not replenish RX buffers after every polling loop (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Ensure that CRQ entry read are correctly ordered (bsc#1182485 ltc#191591).

- ibmvnic: Ensure that device queue memory is cache-line aligned (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Ensure that SCRQ entry reads are correctly ordered (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: fix a race between open and reset (bsc#1176855 ltc#187293).

- ibmvnic: fix login buffer memory leak (bsc#1081134 ltc#164631).

- ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: fix rx buffer tracking and index management in replenish_rx_pool partial success (bsc#1179929 ltc#189960).

- ibmvnic: Fix TX completion error handling (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Fix use-after-free of VNIC login response buffer (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: handle inconsistent login with reset (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Harden device Command Response Queue handshake (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: improve ibmvnic_init and ibmvnic_reset_init (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Introduce batched RX buffer descriptor transmission (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Introduce indirect subordinate Command Response Queue buffer (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Introduce xmit_more support using batched subCRQ hcalls (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: merge ibmvnic_reset_init and ibmvnic_init (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: no reset timeout for 5 seconds after reset (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: reduce wait for completion time (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: remove never executed if statement (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Remove send_subcrq function (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: rename ibmvnic_send_req_caps to send_request_cap (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: rename send_cap_queries to send_query_cap (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: rename send_map_query to send_query_map (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: send_login should check for crq errors (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: serialize access to work queue on remove (bsc#1065729).

- ibmvnic: Set to CLOSED state even on error (bsc#1084610 ltc#165122 git-fixes).

- ibmvnic: skip send_request_unmap for timeout reset (bsc#1182485 ltc#191591).

- ibmvnic: skip tx timeout reset while in resetting (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: stop free_all_rwi on failed reset (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: store RX and TX subCRQ handle array in ibmvnic_adapter struct (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: track pending login (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: update MAINTAINERS (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ibmvnic: Use netdev_alloc_skb instead of alloc_skb to replenish RX buffers (jsc#SLE-17043 bsc#1179243 ltc#189290).

- ice: Do not allow more channels than LAN MSI-X available (jsc#SLE-7926).

- ice: Fix MSI-X vector fallback logic (jsc#SLE-7926).

- igc: check return value of ret_val in igc_config_fc_after_link_up (git-fixes).

- igc: fix link speed advertising (git-fixes).

- igc: Fix returning wrong statistics (git-fixes).

- igc: Report speed and duplex as unknown when device is runtime suspended (git-fixes).

- igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr (git-fixes).

- include/linux/memremap.h: remove stale comments (git-fixes).

- Input: elo - fix an error code in elo_connect() (git-fixes).

- Input: i8042 - unbreak Pegatron C15B (git-fixes).

- Input: joydev - prevent potential read overflow in ioctl (git-fixes).

- Input: sur40 - fix an error code in sur40_probe() (git-fixes).

- Input: xpad - sync supported devices with fork on GitHub (git-fixes).

- iwlwifi: mvm: do not send RFH_QUEUE_CONFIG_CMD with no queues (git-fixes).

- iwlwifi: mvm: guard against device removal in reprobe (git-fixes).

- iwlwifi: mvm: invalidate IDs of internal stations at mvm start (git-fixes).

- iwlwifi: mvm: skip power command when unbinding vif during CSA (git-fixes).

- iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time() (git-fixes).

- iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap (git-fixes).

- iwlwifi: pcie: fix context info memory leak (git-fixes).

- iwlwifi: pcie: reschedule in long-running memory reads (git-fixes).

- iwlwifi: pcie: use jiffies for memory read spin time limit (git-fixes).

- ixgbe: avoid premature Rx buffer reuse (git-fixes).

- ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K (git-fixes).

- kABI: Fix kABI after AMD SEV PCID fixes (bsc#1178995).

- kABI: Fix kABI after modifying struct __call_single_data (bsc#1180846).

- kABI: Fix kABI for extended APIC-ID support (bsc#1181259, jsc#ECO-3191).

- kABI: repair, after 'nVMX: Emulate MTF when performinginstruction emulation' kvm_x86_ops is part of kABI as it's used by LTTng. But it's only read and never allocated in there, so growing it (without altering existing members' offsets) is fine.

- kernel-binary.spec: Add back initrd and image symlink ghosts to filelist (bsc#1182140). Fixes: 76a9256314c3 ('rpm/kernel-(source,binary).spec: do not include ghost symlinks (boo#1179082).')

- kernel/smp: add boot parameter for controlling CSD lock debugging (bsc#1180846).

- kernel/smp: add more data to CSD lock debugging (bsc#1180846).

- kernel/smp: prepare more CSD lock debugging (bsc#1180846).

- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).

- KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch (bsc#1181818).

- KVM: arm64: Remove S1PTW check from kvm_vcpu_dabt_iswrite() (bsc#1181818).

- KVM: nVMX: do not clear mtf_pending when nested events are blocked (bsc#1182489).

- KVM: nVMX: Emulate MTF when performing instruction emulation (bsc#1182380).

- KVM: nVMX: Handle pending #DB when injecting INIT VM-exit. Pulling in as a dependency of: 'KVM: nVMX:
Emulate MTF when performing instruction emulation' (bsc#1182380).

- KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (bsc#1178995).

- KVM: tracing: Fix unmatched kvm_entry and kvm_exit events (bsc#1182770).

- KVM: VMX: Condition ENCLS-exiting enabling on CPU support for SGX1 (bsc#1182798).

- KVM: x86: Allocate new rmap and large page tracking when moving memslot (bsc#1182800).

- KVM: x86: allow KVM_STATE_NESTED_MTF_PENDING in kvm_state flags (bsc#1182490).

- KVM: x86: clear stale x86_emulate_ctxt->intercept value (bsc#1182381).

- KVM: x86: do not notify userspace IOAPIC on edge-triggered interrupt EOI (bsc#1182374).

- KVM: x86: Gracefully handle __vmalloc() failure during VM allocation (bsc#1182801).

- KVM: x86: Introduce cr3_lm_rsvd_bits in kvm_vcpu_arch (bsc#1178995).

- KVM: x86: remove stale comment from struct x86_emulate_ctxt (bsc#1182406).

- libnvdimm/dimm: Avoid race between probe and available_slots_show() (bsc#1170442).

- lib/vsprintf: no_hash_pointers prints all addresses as unhashed (bsc#1182599).

- linux/clk.h: use correct kernel-doc notation for 2 functions (git-fixes).

- mac80211: 160MHz with extended NSS BW in CSA (git-fixes).

- mac80211: fix fast-rx encryption check (git-fixes).

- mac80211: fix potential overflow when multiplying to u32 integers (git-fixes).

- mac80211: pause TX while changing interface type (git-fixes).

- macros.kernel-source: Use spec_install_pre for certificate installation (boo#1182672). Since rpm 4.16 files installed during build phase are lost.

- MAINTAINERS: remove John Allen from ibmvnic (jsc#SLE-17043 bsc#1179243 ltc#189290).

- matroxfb: avoid -Warray-bounds warning (bsc#1152472)

- media: aspeed: fix error return code in aspeed_video_setup_video() (git-fixes).

- media: camss: missing error code in msm_video_register() (git-fixes).

- media: cx25821: Fix a bug when reallocating some dma memory (git-fixes).

- media: em28xx: Fix use-after-free in em28xx_alloc_urbs (git-fixes).

- media: i2c: ov5670: Fix PIXEL_RATE minimum value (git-fixes).

- media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt() (git-fixes).

- media: lmedm04: Fix misuse of comma (git-fixes).

- media: media/pci: Fix memleak in empress_init (git-fixes).

- media: mt9v111: Remove unneeded device-managed puts (git-fixes).

- media: pwc: Use correct device for DMA (bsc#1181133).

- media: pxa_camera: declare variable when DEBUG is defined (git-fixes).

- media: qm1d1c0042: fix error return code in qm1d1c0042_init() (git-fixes).

- media: software_node: Fix refcounts in software_node_get_next_child() (git-fixes).

- media: tm6000: Fix memleak in tm6000_start_stream (git-fixes).

- media: vsp1: Fix an error handling path in the probe function (git-fixes).

- mei: hbm: call mei_set_devstate() on hbm stop response (git-fixes).

- memory: ti-aemif: Drop child node when jumping out loop (git-fixes).

- mfd: bd9571mwv: Use devm_mfd_add_devices() (git-fixes).

- mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq() (git-fixes).

- misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users (git-fixes).

- misc: eeprom_93xx46: Fix module alias to enable module autoprobe (git-fixes).

- mlxsw: core: Add validation of transceiver temperature thresholds (git-fixes).

- mlxsw: core: Fix memory leak on module removal (git-fixes).

- mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish() (git-fixes).

- mlxsw: core: Free EMAD transactions using kfree_rcu() (git-fixes).

- mlxsw: core: Increase critical threshold for ASIC thermal zone (git-fixes).

- mlxsw: core: Increase scope of RCU read-side critical section (git-fixes).

- mlxsw: core: Use variable timeout for EMAD retries (git-fixes).

- mlxsw: spectrum_acl: Fix mlxsw_sp_acl_tcam_group_add()'s error path (git-fixes).

- mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails (git-fixes).

- mmc: core: Limit retries when analyse of SDIO tuples fails (git-fixes).

- mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to 128-bytes (git-fixes).

- mmc: sdhci-sprd: Fix some resource leaks in the remove function (git-fixes).

- mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe (git-fixes).

- mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support is disabled (bsc#1181896 ltc#191273).

- mm: proc: Invalidate TLB after clearing soft-dirty page state (bsc#1163776 ltc#183929 git-fixes).

- mm: thp: kABI: move the added flag to the end of enum (bsc#1181896 ltc#191273).

- mt76: dma: fix a possible memory leak in mt76_add_fragment() (git-fixes).

- net: ag71xx: add missed clk_disable_unprepare in error path of probe (git-fixes).

- net: axienet: Fix error return code in axienet_probe() (git-fixes).

- net: bcmgenet: Fix WoL with password after deep sleep (git-fixes).

- net: bcmgenet: keep MAC in reset until PHY is up (git-fixes).

- net: bcmgenet: re-remove bcmgenet_hfb_add_filter (git-fixes).

- net: bcmgenet: set Rx mode before starting netif (git-fixes).

- net: bcmgenet: use hardware padding of runt frames (git-fixes).

- net: broadcom CNIC: requires MMU (git-fixes).

- net: caif: Fix debugfs on 64-bit platforms (git-fixes).

- net/cxgb4: Check the return from t4_query_params properly (git-fixes).

- net: cxgb4: fix return error value in t4_prep_fw (git-fixes).

- net: dsa: bcm_sf2: Fix overflow checks (git-fixes).

- net: dsa: lantiq_gswip: fix and improve the unsupported interface error (git-fixes).

- net: dsa: mt7530: Change the LINK bit to reflect the link status (git-fixes).

- net: dsa: mt7530: set CPU port to fallback mode (git-fixes).

- net: ena: set initial DMA width to avoid intel iommu issue (git-fixes).

- net: ethernet: ave: Fix error returns in ave_init (git-fixes).

- net: ethernet: mlx4: Avoid assigning a value to ring_cons but not used it anymore in mlx4_en_xmit() (git-fixes).

- net: ethernet: ti: ale: fix allmulti for nu type ale (git-fixes).

- net: ethernet: ti: ale: fix seeing unreg mcast packets with promisc and allmulti disabled (git-fixes).

- net: ethernet: ti: ale: modify vlan/mdb api for switchdev (git-fixes).

- net: ethernet: ti: cpsw: allow untagged traffic on host port (git-fixes).

- net: ethernet: ti: fix some return value check of cpsw_ale_create() (git-fixes).

- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).

- net: gro: do not keep too many GRO packets in napi->rx_list (bsc#1154353).

- net: hns3: add a check for queue_id in hclge_reset_vf_queue() (git-fixes).

- net: hns3: add a missing uninit debugfs when unload driver (git-fixes).

- net: hns3: add reset check for VF updating port based VLAN (git-fixes).

- net: hns3: clear port base VLAN when unload PF (git-fixes).

- net: hns3: fix aRFS FD rules leftover after add a user FD rule (git-fixes).

- net: hns3: fix a TX timeout issue (git-fixes).

- net: hns3: fix desc filling bug when skb is expanded or lineared (git-fixes).

- net: hns3: fix for mishandle of asserting VF reset fail (git-fixes).

- net: hns3: fix for VLAN config when reset failed (git-fixes).

- net: hns3: fix RSS config lost after VF reset (git-fixes).

- net: hns3: fix set and get link ksettings issue (git-fixes).

- net: hns3: fix 'tc qdisc del' failed issue (git-fixes).

- net: hns3: fix the number of queues actually used by ARQ (git-fixes).

- net: hns3: fix use-after-free when doing self test (git-fixes).

- net: hns3: fix VF VLAN table entries inconsistent issue (git-fixes).

- net: hns: fix return value check in __lb_other_process() (git-fixes).

- net: lpc-enet: fix error return code in lpc_mii_init() (git-fixes).

- net: macb: fix call to pm_runtime in the suspend/resume functions (git-fixes).

- net: macb: fix wakeup test in runtime suspend/resume routines (git-fixes).

- net: macb: mark device wake capable when 'magic-packet' property present (git-fixes).

- net/mlx4_core: fix a memory leak bug (git-fixes).

- net/mlx4_core: Fix init_hca fields offset (git-fixes).

- net/mlx4_en: Avoid scheduling restart task if it is already running (bsc#1181854).

- net/mlx4_en: Handle TX error CQE (bsc#1181854).

- net/mlx5: Add handling of port type in rule deletion (git-fixes).

- net/mlx5: Annotate mutex destroy for root ns (git-fixes).

- net/mlx5: Clear LAG notifier pointer after unregister (git-fixes).

- net/mlx5: Disable QoS when min_rates on all VFs are zero (git-fixes).

- net/mlx5: Do not call timecounter cyc2time directly from 1PPS flow (git-fixes).

- net/mlx5: Do not maintain a case of del_sw_func being null (git-fixes).

- net/mlx5e: Correctly handle changing the number of queues when the interface is down (git-fixes).

- net/mlx5e: Do not trigger IRQ multiple times on XSK wakeup to avoid WQ overruns (git-fixes).

- net/mlx5e: en_accel, Add missing net/geneve.h include (git-fixes).

- net/mlx5e: Encapsulate updating netdev queues into a function (git-fixes).

- net/mlx5e: E-switch, Fix rate calculation for overflow (jsc#SLE-8464).

- net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq (git-fixes).

- net/mlx5e: Fix configuration of XPS cpumasks and netdev queues in corner cases (git-fixes).

- net/mlx5e: Fix endianness handling in pedit mask (git-fixes).

- net/mlx5e: Fix error path of device attach (git-fixes).

- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups (git-fixes).

- net/mlx5e: Fix two double free cases (git-fixes).

- net/mlx5e: Fix VLAN cleanup flow (git-fixes).

- net/mlx5e: Fix VLAN create flow (git-fixes).

- net/mlx5e: Get the latest values from counters in switchdev mode (git-fixes).

- net/mlx5e: IPoIB, Drop multicast packets that this interface sent (git-fixes).

- net/mlx5e: kTLS, Fix wrong value in record tracker enum (git-fixes).

- net/mlx5e: Reduce tc unsupported key print level (git-fixes).

- net/mlx5e: Rename hw_modify to preactivate (git-fixes).

- net/mlx5e: Set of completion request bit should not clear other adjacent bits (git-fixes).

- net/mlx5: E-switch, Destroy TSAR after reload interface (git-fixes).

- net/mlx5: E-Switch, Hold mutex when querying drop counter in legacy mode (git-fixes).

- net/mlx5: E-Switch, Use vport metadata matching by default (git-fixes).

- net/mlx5: E-Switch, Use vport metadata matching only when mandatory (git-fixes).

- net/mlx5e: Use preactivate hook to set the indirection table (git-fixes).

- net/mlx5e: vxlan: Use RCU for vxlan table lookup (git-fixes).

- net/mlx5: Fix a bug of using ptp channel index as pin index (git-fixes).

- net/mlx5: Fix deletion of duplicate rules (git-fixes).

- net/mlx5: Fix failing fw tracer allocation on s390 (git-fixes).

- net/mlx5: Fix memory leak on flow table creation error flow (git-fixes).

- net/mlx5: Fix request_irqs error flow (git-fixes).

- net/mlx5: Fix wrong address reclaim when command interface is down (git-fixes).

- net/mlx5: Query PPS pin operational status before registering it (git-fixes).

- net/mlx5: Verify Hardware supports requested ptp function on a given pin (git-fixes).

- net: moxa: Fix a potential double 'free_irq()' (git-fixes).

- net: mscc: ocelot: ANA_AUTOAGE_AGE_PERIOD holds a value in seconds, not ms (git-fixes).

- net: mscc: ocelot: fix address ageing time (again) (git-fixes).

- net: mscc: ocelot: properly account for VLAN header length when setting MRU (git-fixes).

- net: mvpp2: Add TCAM entry to drop flow control pause frames (git-fixes).

- net: mvpp2: disable force link UP during port init procedure (git-fixes).

- net: mvpp2: Fix error return code in mvpp2_open() (git-fixes).

- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations (git-fixes).

- net: mvpp2: fix memory leak in mvpp2_rx (git-fixes).

- net: mvpp2: fix pkt coalescing int-threshold configuration (git-fixes).

- net: mvpp2: prs: fix PPPoE with ipv6 packet parse (git-fixes).

- net: mvpp2: Remove Pause and Asym_Pause support (git-fixes).

- net: mvpp2: TCAM entry enable should be written after SRAM data (git-fixes).

- net: netsec: Correct dma sync for XDP_TX frames (git-fixes).

- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).

- net: octeon: mgmt: Repair filling of RX ring (git-fixes).

- net: phy: at803x: use operating parameters from PHY-specific status (git-fixes).

- net: phy: extract link partner advertisement reading (git-fixes).

- net: phy: extract pause mode (git-fixes).

- net: phy: marvell10g: fix NULL pointer dereference (git-fixes).

- net: phy: marvell10g: fix temperature sensor on 2110 (git-fixes).

- net: phy: read MII_CTRL1000 in genphy_read_status only if needed (git-fixes).

- net: qca_spi: fix receive buffer size check (git-fixes).

- net: qca_spi: Move reset_count to struct qcaspi (git-fixes).

- net: qede: fix PTP initialization on recovery (git-fixes).

- net: qede: fix use-after-free on recovery and AER handling (git-fixes).

- net: qede: stop adding events on an already destroyed workqueue (git-fixes).

- net: qed: fix async event callbacks unregistering (git-fixes).

- net: qed: fix excessive QM ILT lines consumption (git-fixes).

- net: qed: fix 'maybe uninitialized' warning (git-fixes).

- net: qed: fix NVMe login fails over VFs (git-fixes).

- net: qed: RDMA personality shouldn't fail VF load (git-fixes).

- net: re-solve some conflicts after net -> net-next merge (bsc#1176855 ltc#187293).

- net: rmnet: do not allow to add multiple bridge interfaces (git-fixes).

- net: rmnet: do not allow to change mux id if mux id is duplicated (git-fixes).

- net: rmnet: fix bridge mode bugs (git-fixes).

- net: rmnet: fix lower interface leak (git-fixes).

- net: rmnet: fix NULL pointer dereference in rmnet_changelink() (git-fixes).

- net: rmnet: fix NULL pointer dereference in rmnet_newlink() (git-fixes).

- net: rmnet: fix packet forwarding in rmnet bridge mode (git-fixes).

- net: rmnet: fix suspicious RCU usage (git-fixes).

- net: rmnet: print error message when command fails (git-fixes).

- net: rmnet: remove rcu_read_lock in rmnet_force_unassociate_device() (git-fixes).

- net: rmnet: use upper/lower device infrastructure (git-fixes).

- net, sctp, filter: remap copy_from_user failure error (bsc#1181637).

- net: smc91x: Fix possible memory leak in smc_drv_probe() (git-fixes).

- net/sonic: Add mutual exclusion for accessing shared state (git-fixes).

- net: stmmac: 16KB buffer must be 16 byte aligned (git-fixes).

- net: stmmac: Always arm TX Timer at end of transmission start (git-fixes).

- net: stmmac: Do not accept invalid MTU values (git-fixes).

- net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes (git-fixes).

- net: stmmac: Enable 16KB buffer size (git-fixes).

- net: stmmac: fix disabling flexible PPS output (git-fixes).

- net: stmmac: fix length of PTP clock's name string (git-fixes).

- net: stmmac: Fix the TX IOC in xmit path (git-fixes).

- net: stmmac: RX buffer size must be 16 byte aligned (git-fixes).

- net: stmmac: selftests: Flow Control test can also run with ASYM Pause (git-fixes).

- net: stmmac: selftests: Needs to check the number of Multicast regs (git-fixes).

- net: stmmac: xgmac: Clear previous RX buffer size (git-fixes).

- net: sun: fix missing release regions in cas_init_one() (git-fixes).

- net: team: fix memory leak in __team_options_register (git-fixes).

- net: thunderx: initialize VF's mailbox mutex before first usage (git-fixes).

- net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family (git-fixes).

- net: usb: qmi_wwan: Adding support for Cinterion MV31 (git-fixes).

- nvme-hwmon: rework to avoid devm allocation (bsc#1177326).

- nvme-multipath: Early exit if no path is available (bsc#1180964).

- nvme: re-read ANA log on NS CHANGED AEN (bsc#1179137).

- nvmet-tcp: Fix NULL dereference when a connect data comes in h2cdata pdu (bsc#1182547).

- objtool: Do not fail on missing symbol table (bsc#1169514).

- perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (bsc#1180989).

- perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (bsc#1180989).

- perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (bsc#1180989).

- perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (bsc#1180989).

- perf/x86/intel/uncore: Generic support for the PCI sub driver (bsc#1180989).

- perf/x86/intel/uncore: Store the logical die id instead of the physical die id (bsc#1180989).

- perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info (bsc#1180989).

- phy: cpcap-usb: Fix warning for missing regulator_disable (git-fixes).

- phy: rockchip-emmc: emmc_phy_init() always return 0 (git-fixes).

- platform/x86: hp-wmi: Disable tablet-mode reporting by default (git-fixes).

- platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron 7352 (git-fixes).

- platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix touchscreen on Estar Beauty HD tablet (git-fixes).

- powerpc/book3s64/hash: Add cond_resched to avoid soft lockup warning (bsc#1182571 ltc#191345).

- powerpc/boot: Delete unneeded .globl _zimage_start (bsc#1156395).

- powerpc: Fix alignment bug within the init sections (bsc#1065729).

- powerpc/fpu: Drop cvt_fd() and cvt_df() (bsc#1156395).

- powerpc/hvcall: add token and codes for H_VASI_SIGNAL (bsc#1181674 ltc#189159).

- powerpc: kABI: add back suspend_disable_cpu in machdep_calls (bsc#1181674 ltc#189159).

- powerpc/machdep: remove suspend_disable_cpu() (bsc#1181674 ltc#189159).

- powerpc/mm/pkeys: Make pkey access check work on execute_only_key (bsc#1181544 ltc#191080 git-fixes).

- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477 ltc#175530).

- powerpc/numa: make vphn_enabled, prrn_enabled flags const (bsc#1181674 ltc#189159).

- powerpc/numa: remove ability to enable topology updates (bsc#1181674 ltc#189159).

- powerpc/numa: remove arch_update_cpu_topology (bsc#1181674 ltc#189159).

- powerpc/numa: Remove late request for home node associativity (bsc#1181674 ltc#189159).

- powerpc/numa: remove prrn_is_enabled() (bsc#1181674 ltc#189159).

- powerpc/numa: remove start/stop_topology_update() (bsc#1181674 ltc#189159).

- powerpc/numa: remove timed_topology_update() (bsc#1181674 ltc#189159).

- powerpc/numa: remove unreachable topology timer code (bsc#1181674 ltc#189159).

- powerpc/numa: remove unreachable topology update code (bsc#1181674 ltc#189159).

- powerpc/numa: remove unreachable topology workqueue code (bsc#1181674 ltc#189159).

- powerpc/numa: remove vphn_enabled and prrn_enabled internal flags (bsc#1181674 ltc#189159).

- powerpc/numa: stub out numa_update_cpu_topology() (bsc#1181674 ltc#189159).

- powerpc/perf: Exclude kernel samples while counting events in user space (bsc#1065729).

- powerpc/perf/hv-24x7: Dont create sysfs event files for dummy events (bsc#1182118 ltc#190624).

- powerpc/pkeys: Avoid using lockless page table walk (bsc#1181544 ltc#191080).

- powerpc/pkeys: Check vma before returning key fault error to the user (bsc#1181544 ltc#191080).

- powerpc/powernv/memtrace: Do not leak kernel memory to user space (bsc#1156395).

- powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently (bsc#1156395).

- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (bsc#1156395).

- powerpc/prom: Fix 'ibm,arch-vec-5-platform-support' scan (bsc#1182602 ltc#190924).

- powerpc/pseries/dlpar: handle ibm, configure-connector delay status (bsc#1181985 ltc#188074).

- powerpc/pseries: Do not enforce MSI affinity with kdump (bsc#1181655 ltc#190855).

- powerpc/pseries/eeh: Make pseries_pcibios_bus_add_device() static (bsc#1078720, git-fixes).

- powerpc/pseries: extract host bridge from pci_bus prior to bus removal (bsc#1182171 ltc#190900).

- powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops (bsc#1181674 ltc#189159).

- powerpc/pseries/hibernation: pass stream id via function arguments (bsc#1181674 ltc#189159).

- powerpc/pseries/hibernation: perform post-suspend fixups later (bsc#1181674 ltc#189159).

- powerpc/pseries/hibernation: remove prepare_late() callback (bsc#1181674 ltc#189159).

- powerpc/pseries/hibernation: remove pseries_suspend_cpu() (bsc#1181674 ltc#189159).

- powerpc/pseries/hibernation: switch to rtas_ibm_suspend_me() (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: add missing break to default case (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: Add pr_debug() for device tree changes (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: do not error on absence of ibm, update-nodes (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: error message improvements (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: extract VASI session polling logic (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: refactor node lookup during DT update (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: retry partition suspend after error (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: Set pr_fmt() (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: signal suspend cancellation to platform (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: use rtas_activate_firmware() on resume (bsc#1181674 ltc#189159).

- powerpc/pseries/mobility: use stop_machine for join/suspend (bsc#1181674 ltc#189159).

- powerpc/pseries/ras: Make init_ras_hotplug_IRQ() static (bsc#1065729. git-fixes).

- powerpc/pseries: remove dlpar_cpu_readd() (bsc#1181674 ltc#189159).

- powerpc/pseries: remove memory 're-add' implementation (bsc#1181674 ltc#189159).

- powerpc/pseries: remove obsolete memory hotplug DT notifier code (bsc#1181674 ltc#189159).

- powerpc/pseries: remove prrn special case from DT update path (bsc#1181674 ltc#189159).

- powerpc/rtas: add rtas_activate_firmware() (bsc#1181674 ltc#189159).

- powerpc/rtas: add rtas_ibm_suspend_me() (bsc#1181674 ltc#189159).

- powerpc/rtas: complete ibm,suspend-me status codes (bsc#1181674 ltc#189159).

- powerpc/rtas: dispatch partition migration requests to pseries (bsc#1181674 ltc#189159).

- powerpc/rtasd: simplify handle_rtas_event(), emit message on events (bsc#1181674 ltc#189159).

- powerpc/rtas: prevent suspend-related sys_rtas use on LE (bsc#1181674 ltc#189159).

- powerpc/rtas: remove rtas_ibm_suspend_me_unsafe() (bsc#1181674 ltc#189159).

- powerpc/rtas: remove rtas_suspend_cpu() (bsc#1181674 ltc#189159).

- powerpc/rtas: remove unused rtas_suspend_last_cpu() (bsc#1181674 ltc#189159).

- powerpc/rtas: remove unused rtas_suspend_me_data (bsc#1181674 ltc#189159).

- powerpc/rtas: rtas_ibm_suspend_me -> rtas_ibm_suspend_me_unsafe (bsc#1181674 ltc#189159).

- power: reset: at91-sama5d2_shdwc: fix wkupdbc mask (git-fixes).

- pseries/drmem: do not cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).

- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).

- qed: fix error return code in qed_iwarp_ll2_start() (git-fixes).

- qed: Fix race condition between scheduling and destroying the slowpath workqueue (git-fixes).

- qed: Populate nvm-file attributes while reading nvm config partition (git-fixes).

- qed: select CONFIG_CRC32 (git-fixes).

- qlcnic: fix missing release in qlcnic_83xx_interrupt_test (git-fixes).

- quota: Fix memory leak when handling corrupted quota file (bsc#1182650).

- quota: Sanity-check quota file headers on load (bsc#1182461).

- r8169: fix resuming from suspend on RTL8105e if machine runs on battery (git-fixes).

- r8169: fix WoL on shutdown if CONFIG_DEBUG_SHIRQ is set (git-fixes).

- rcu/nocb: Perform deferred wake up before last idle's (git-fixes)

- rcu/nocb: Trigger self-IPI on late deferred wake up before (git-fixes)

- rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers (git-fixes)

- RDMA/efa: Add EFA 0xefa1 PCI ID (bsc#1176248).

- RDMA/efa: Count admin commands errors (bsc#1176248).

- RDMA/efa: Count mmap failures (bsc#1176248).

- RDMA/efa: Do not delay freeing of DMA pages (bsc#1176248).

- RDMA/efa: Drop double zeroing for sg_init_table() (bsc#1176248).

- RDMA/efa: Expose maximum TX doorbell batch (bsc#1176248).

- RDMA/efa: Expose minimum SQ size (bsc#1176248).

- RDMA/efa: Fix setting of wrong bit in get/set_feature commands (bsc#1176248).

- RDMA/efa: Properly document the interrupt mask register (bsc#1176248).

- RDMA/efa: Remove redundant udata check from alloc ucontext response (bsc#1176248).

- RDMA/efa: Report create CQ error counter (bsc#1176248).

- RDMA/efa: Report host information to the device (bsc#1176248).

- RDMA/efa: Unified getters/setters for device structs bitmask access (bsc#1176248).

- RDMA/efa: Use in-kernel offsetofend() to check field availability (bsc#1176248).

- RDMA/efa: User/kernel compatibility handshake mechanism (bsc#1176248).

- RDMA/efa: Use the correct current and new states in modify QP (git-fixes).

- regulator: axp20x: Fix reference cout leak (git-fixes).

- regulator: core: Avoid debugfs: Directory ... already present! error (git-fixes).

- regulator: core: avoid regulator_resolve_supply() race condition (git-fixes).

- regulator: Fix lockdep warning resolving supplies (git-fixes).

- regulator: s5m8767: Drop regulators OF node reference (git-fixes).

- regulator: s5m8767: Fix reference count leak (git-fixes).

- reiserfs: add check for an invalid ih_entry_count (bsc#1182462).

- Remove debug patch for boot failure (bsc#1182602 ltc#190924).

- reset: hisilicon: correct vendor prefix (git-fixes).

- Revert 'ibmvnic: remove never executed if statement' (jsc#SLE-17043 bsc#1179243 ltc#189290).

- Revert 'net: bcmgenet: remove unused function in bcmgenet.c' (git-fixes).

- Revert 'platform/x86: ideapad-laptop: Switch touchpad attribute to be RO' (git-fixes).

- Revert 'RDMA/mlx5: Fix devlink deadlock on net namespace deletion' (jsc#SLE-8464).

- rpm/kernel-subpackage-build: Workaround broken bot (https://github.com/openSUSE/openSUSE-release-tools/issu es/2439)

- rpm/post.sh: Avoid purge-kernel for the first installed kernel (bsc#1180058)

- rtc: s5m: select REGMAP_I2C (git-fixes).

- rxrpc: Fix memory leak in rxrpc_lookup_local (bsc#1154353 bnc#1151927 5.3.9).

- s390/vfio-ap: clean up vfio_ap resources when KVM pointer invalidated (git-fixes).

- s390/vfio-ap: No need to disable IRQ after queue reset (git-fixes).

- sched: Reenable interrupts in do_sched_yield() (git-fixes)

- scsi: lpfc: Fix EEH encountering oops with NVMe traffic (bsc#1181958).

- sh_eth: check sh_eth_cpu_data::cexcr when dumping registers (git-fixes).

- sh_eth: check sh_eth_cpu_data::no_tx_cntrs when dumping registers (git-fixes).

- sh_eth: check sh_eth_cpu_data::no_xdfar when dumping registers (git-fixes).

- smp: Add source and destination CPUs to
__call_single_data (bsc#1180846).

- smsc95xx: avoid memory leak in smsc95xx_bind (git-fixes).

- smsc95xx: check return value of smsc95xx_reset (git-fixes).

- soc: aspeed: snoop: Add clock control logic (git-fixes).

- spi: atmel: Put allocated master before return (git-fixes).

- spi: pxa2xx: Fix the controller numbering for Wildcat Point (git-fixes).

- spi: spi-synquacer: fix set_cs handling (git-fixes).

- spi: stm32: properly handle 0 byte transfer (git-fixes).

- squashfs: add more sanity checks in id lookup (git-fixes bsc#1182266).

- squashfs: add more sanity checks in inode lookup (git-fixes bsc#1182267).

- squashfs: add more sanity checks in xattr id lookup (git-fixes bsc#1182268).

- staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules (git-fixes).

- target: disallow emulate_legacy_capacity with RBD object-map (bsc#1177109).

- team: set dev->needed_headroom in team_setup_by_port() (git-fixes).

- tpm: Remove tpm_dev_wq_lock (git-fixes).

- tpm_tis: Clean up locality release (git-fixes).

- tpm_tis: Fix check_locality for correct locality acquisition (git-fixes).

- tracing: Check length before giving out the filter buffer (git-fixes).

- tracing: Do not count ftrace events in top level enable output (git-fixes).

- tracing/kprobe: Fix to support kretprobe events on unloaded modules (git-fixes).

- tracing/kprobes: Do the notrace functions check without kprobes on ftrace (git-fixes).

- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS (git-fixes).

- ubifs: Fix error return code in ubifs_init_authentication() (bsc#1182459).

- ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans() (bsc#1182454).

- ubifs: prevent creating duplicate encrypted filenames (bsc#1182457).

- ubifs: ubifs_add_orphan: Fix a memory leak bug (bsc#1182456).

- ubifs: ubifs_jnl_write_inode: Fix a memory leak bug (bsc#1182455).

- ubifs: wbuf: Do not leak kernel memory to flash (bsc#1182458).

- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).

- Update config files: armv7hl: Set ledtrig-default-on as builtin (bsc#1182128)

- Update config files: Set ledtrig-default-on as builtin (bsc#1182128)

- USB: dwc2: Abort transaction after errors with unknown reason (git-fixes).

- USB: dwc2: Fix endpoint direction check in ep_from_windex (git-fixes).

- USB: dwc2: Make 'trimming xfer length' a debug message (git-fixes).

- USB: dwc3: fix clock issue during resume in OTG mode (git-fixes).

- USB: gadget: legacy: fix an error code in eth_bind() (git-fixes).

- USB: gadget: u_audio: Free requests only after callback (git-fixes).

- USB: musb: Fix runtime PM race in musb_queue_resume_work (git-fixes).

- USB: quirks: add quirk to start video capture on ELMO L-12F document camera reliable (git-fixes).

- USB: quirks: sort quirk entries (git-fixes).

- USB: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop() (git-fixes).

- USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 (git-fixes).

- USB: serial: cp210x: add pid/vid for WSDA-200-USB (git-fixes).

- USB: serial: mos7720: fix error code in mos7720_write() (git-fixes).

- USB: serial: mos7720: improve OOM-handling in read_mos_reg() (git-fixes).

- USB: serial: mos7840: fix error code in mos7840_write() (git-fixes).

- USB: serial: option: Adding support for Cinterion MV31 (git-fixes).

- USB: usblp: do not call usb_set_interface if there's a single alt (git-fixes).

- veth: Adjust hard_start offset on redirect XDP frames (git-fixes).

- vfs: Convert squashfs to use the new mount API (git-fixes bsc#1182265).

- virtio_net: Fix error code in probe() (git-fixes).

- virtio_net: Fix recursive call to cpus_read_lock() (git-fixes).

- virtio_net: Keep vnet header zeroed if XDP is loaded for small buffer (git-fixes).

- virt: vbox: Do not use wait_event_interruptible when called from kernel context (git-fixes).

- vmxnet3: Remove buf_info from device accessible structures (bsc#1181671).

- vxlan: fix memleak of fdb (git-fixes).

- wext: fix NULL-ptr-dereference with cfg80211's lack of commit() (git-fixes).

- writeback: Drop I_DIRTY_TIME_EXPIRE (bsc#1182460).

- x86/alternatives: Sync bp_patching update for avoiding NULL pointer exception (bsc#1152489).

- x86/apic: Add extra serialization for non-serializing MSRs (bsc#1152489).

- x86/apic: Support 15 bits of APIC ID in IOAPIC/MSI where available (bsc#1181259, jsc#ECO-3191).

- x86/ioapic: Handle Extended Destination ID field in RTE (bsc#1181259, jsc#ECO-3191).

- x86/kvm: Add KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259, jsc#ECO-3191).

- x86/kvm: Reserve KVM_FEATURE_MSI_EXT_DEST_ID (bsc#1181259 jsc#ECO-3191).

- x86/msi: Only use high bits of MSI address for DMAR unit (bsc#1181259, jsc#ECO-3191).

- xen/netback: avoid race in xenvif_rx_ring_slots_available() (bsc#1065600).

- xen/netback: fix spurious event detection for common event case (bsc#1182175).

- xfs: ensure inobt record walks always make forward progress (git-fixes bsc#1182272).

- xfs: fix an ABBA deadlock in xfs_rename (git-fixes bsc#1182558).

- xfs: fix parent pointer scrubber bailing out on unallocated inodes (git-fixes bsc#1182276).

- xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks (git-fixes bsc#1182430).

- xfs: fix the minrecs logic when dealing with inode root child blocks (git-fixes bsc#1182273).

- xfs: ratelimit xfs_discard_page messages (bsc#1182283).

- xfs: reduce quota reservation when doing a dax unwritten extent conversion (git-fixes bsc#1182561).

- xfs: return corresponding errcode if xfs_initialize_perag() fail (git-fixes bsc#1182275).

- xfs: scrub should mark a directory corrupt if any entries cannot be iget'd (git-fixes bsc#1182278).

- xfs: strengthen rmap record flags checking (git-fixes bsc#1182271).

- xhci: fix bounce buffer usage for non-sg list case (git-fixes).

Solution

Update the affected the Linux Kernel packages.

Plugin Details

Severity: High

ID: 147563

File Name: openSUSE-2021-393.nasl

Version: 1.4

Type: local

Agent: unix

Family: SuSE Local Security Checks

Published: 3/10/2021

Updated: 1/10/2024

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Temporal Score: 5.4

Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2020-29368

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS Score Source: CVE-2021-26930

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:kernel-debug-debuginfo, p-cpe:/a:novell:opensuse:kernel-default-base, p-cpe:/a:novell:opensuse:kernel-preempt-debuginfo, p-cpe:/a:novell:opensuse:kernel-kvmsmall-debuginfo, p-cpe:/a:novell:opensuse:kernel-source, p-cpe:/a:novell:opensuse:kernel-obs-build-debugsource, p-cpe:/a:novell:opensuse:kernel-preempt-debugsource, cpe:/o:novell:opensuse:15.2, p-cpe:/a:novell:opensuse:kernel-preempt-devel, p-cpe:/a:novell:opensuse:kernel-syms, p-cpe:/a:novell:opensuse:kernel-default-devel, p-cpe:/a:novell:opensuse:kernel-docs-html, p-cpe:/a:novell:opensuse:kernel-preempt, p-cpe:/a:novell:opensuse:kernel-default, p-cpe:/a:novell:opensuse:kernel-macros, p-cpe:/a:novell:opensuse:kernel-default-debugsource, p-cpe:/a:novell:opensuse:kernel-kvmsmall, p-cpe:/a:novell:opensuse:kernel-kvmsmall-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-debug-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-devel, p-cpe:/a:novell:opensuse:kernel-preempt-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-obs-build, p-cpe:/a:novell:opensuse:kernel-debug-devel, p-cpe:/a:novell:opensuse:kernel-debug-debugsource, p-cpe:/a:novell:opensuse:kernel-default-base-rebuild, p-cpe:/a:novell:opensuse:kernel-kvmsmall-debugsource, p-cpe:/a:novell:opensuse:kernel-obs-qa, p-cpe:/a:novell:opensuse:kernel-default-debuginfo, p-cpe:/a:novell:opensuse:kernel-default-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-source-vanilla, p-cpe:/a:novell:opensuse:kernel-kvmsmall-devel, p-cpe:/a:novell:opensuse:kernel-debug

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/8/2021

Vulnerability Publication Date: 11/28/2020

Reference Information

CVE: CVE-2020-12362, CVE-2020-12363, CVE-2020-12364, CVE-2020-12373, CVE-2020-29368, CVE-2020-29374, CVE-2021-26930, CVE-2021-26931, CVE-2021-26932

Detections

Analytics